Skip to main content
Solved

SAML Account removed from Administrator

  • July 14, 2025
  • 8 replies
  • 146 views

Forum|alt.badge.img

Hi, for any reason may saml account is removed from local Administrators group from Password Safe Cloud. Is there any reason

Best answer by Prudhvi Keertipati

If you are managing access from AD groups, then disabling the Group Resync doesn’t have any impact on AD group access controls, they function as usual.

Group Resync option applies only to local groups.

 

8 replies

Prudhvi Keertipati
Forum|alt.badge.img+3

@Higor Yes, SAML accounts will be removed from local Administrators groups or any local group, when the below option is enabled.

Configuration → Authentication Management → Authentication Options. 

 


Forum|alt.badge.img
  • Author
  • Trailblazer
  • July 14, 2025

Oh nice. So in this case I should keep this option unchecked, right? Does it interfere in any other SAML process?


Forum|alt.badge.img
  • Author
  • Trailblazer
  • July 14, 2025

If I understood correctly, if I disable it the groups assigned to users will not be removed, even they are removed from AD. It can cause inconsistences in my access.


Prudhvi Keertipati
Forum|alt.badge.img+3

If you want your users not be removed from local groups then you should disable the group resync.

Are you controlling the group assignment from SAML as well?


Forum|alt.badge.img
  • Author
  • Trailblazer
  • July 14, 2025

I am controlling only one SAML group. Which contains ALL password safe users. The access inside Password Safe is controlled by AD - which is replicated to PS in a daily bases.


Prudhvi Keertipati
Forum|alt.badge.img+3

If you are managing access from AD groups, then disabling the Group Resync doesn’t have any impact on AD group access controls, they function as usual.

Group Resync option applies only to local groups.

 


Forum|alt.badge.img
  • Author
  • Trailblazer
  • July 17, 2025

Good. Thanks I will follow this way, Appreciate, helped me a lot.


GloriaB
BeyondTrust Employee
  • BeyondTrust Employee
  • July 31, 2025